MCP server that wraps the Hayabusa CLI for analyzing Windows EVTX event logs
2 files for Claude Code: detection-engineering, mcp-hayabusa CLAUDE.md — 5,356 tokens loaded in every session.
CLAUDE.md A 5,356 tok .claude/skills/detection-engineering/SKILL.md A 64 tok These files are baobao26/mcp-hayabusa's own configuration — they tell Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.